webonyx/graphql-php vulnerabilities (Packagist)

1 vulnerability.

• webonyx/graphql-php Packagist graphql-php: Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation CVE-2026-40476 Fix available 6.9 MediumApril 14, 2026